Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
File: bBt3vE7dikuDdEdqc0dxm2drdV4.mft (raw, json)
Hash identifier: 5cgDmqYRcLkGRpP44jsI8CLj9H+qDdyYW5BCxTMNhD0=
Subject key identifier: 1A:C1:D5:8A:00:E4:52:6C:3B:8F:FF:EB:79:E4:81:C5:5E:C1:D1:D2
Authority key identifier: 6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E
Certificate issuer: /CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
Certificate serial: 01985FB6D0CDA7E66B81C915ADECED4149B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
Manifest number: 07A2
Signing time: Thu 31 Jul 2025 09:01:13 +0000
Manifest this update: Thu 31 Jul 2025 09:01:13 +0000
Manifest next update: Fri 01 Aug 2025 09:01:13 +0000
Files and hashes: 1: O2px1aU6bIAARpFepBVuBuziiJg.roa (hash: YWn9Xv+EiDSxX317xosj76y38TuR6qoVCsWMWeoaRA8=)
2: bBt3vE7dikuDdEdqc0dxm2drdV4.crl (hash: 5G94dXq9YeTlRa//+K35rPaPD3YXQ0qr5kss/wQ4Dm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:b6:d0:cd:a7:e6:6b:81:c9:15:ad:ec:ed:41:49:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
Validity
Not Before: Jul 31 09:01:13 2025 GMT
Not After : Aug 1 09:01:13 2025 GMT
Subject: CN=1ac1d58a00e4526c3b8fffeb79e481c55ec1d1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:88:24:95:78:7c:34:2d:47:4a:3e:89:a7:a9:
b2:7f:5a:d5:66:3b:27:fc:47:c4:e9:46:81:5a:a9:
6e:51:26:59:fa:35:7e:c8:5c:a5:b4:1f:69:56:f5:
96:cc:1f:10:b4:bd:c6:18:49:9f:1a:bd:28:05:7f:
2e:22:75:9a:bd:06:9c:46:2a:5f:e1:45:eb:17:df:
27:b3:ed:2a:8d:ff:62:dc:98:dd:93:4e:73:e8:a5:
c0:7d:e0:7e:49:31:fe:73:cb:39:fb:40:42:b2:a1:
a8:ee:9c:3c:e2:db:8c:69:4e:aa:ee:35:85:c6:3d:
4a:58:56:4f:27:9b:68:64:ba:c1:ab:4e:23:69:dc:
1e:0f:f3:60:f3:89:26:cf:6b:dc:ee:83:d7:ff:58:
74:9f:79:8e:7e:ea:92:b9:9f:dd:c9:35:06:58:ec:
72:7d:a6:78:21:36:9c:ed:e7:de:2e:94:94:18:00:
c1:09:7b:cd:04:03:7c:18:a5:40:0e:31:2a:2d:db:
f5:c4:79:61:47:90:59:c9:fc:44:1c:98:00:d7:e7:
00:29:10:88:6c:b3:20:5f:90:06:fd:40:95:7a:5e:
ce:c4:d1:cd:ef:b6:81:1e:f6:c7:fb:45:17:2c:54:
f7:ee:b9:f2:15:ac:b3:65:6c:8a:94:77:20:09:6f:
06:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C1:D5:8A:00:E4:52:6C:3B:8F:FF:EB:79:E4:81:C5:5E:C1:D1:D2
X509v3 Authority Key Identifier:
keyid:6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f4:16:47:88:65:29:9e:db:ff:19:6e:ab:4a:4d:c6:d9:eb:
3c:13:d2:44:cb:90:cb:db:e1:88:ad:0d:4a:9d:6e:72:ae:90:
ee:57:b5:53:d9:46:93:5e:54:5c:f0:df:1f:bf:f0:19:c8:82:
02:39:07:fd:c9:9c:ef:c4:45:2a:46:38:91:10:3a:2a:4b:8e:
79:c0:bc:5b:af:b0:c6:f3:d7:b6:a6:77:7f:8e:58:26:69:d3:
25:fa:1b:c5:ee:5a:3b:20:4a:c7:0e:df:96:84:93:44:7a:bd:
bf:11:78:2f:da:d9:13:43:cc:b5:60:ff:59:73:c8:de:f9:36:
c4:ee:6e:ad:5c:8d:10:d8:af:76:46:d7:80:2f:76:8b:ad:d7:
6f:32:5c:02:54:09:b0:a4:f3:c5:75:ad:00:ba:08:51:de:f1:
6a:7f:85:7c:00:72:55:64:55:c0:bd:16:98:9e:27:84:83:ed:
25:ff:01:e2:6e:43:05:f4:d3:1b:ff:97:b1:70:a2:00:31:00:
b0:21:64:df:b7:f9:88:3c:9c:ef:de:19:5c:72:7a:77:59:39:
d3:0e:ab:2c:ab:1b:85:1d:4d:7a:49:4b:4f:7e:68:6c:72:d1:
14:a9:60:a6:65:71:1f:a0:11:13:e7:0b:43:73:fb:f5:5d:01:
21:c4:34:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhfttDNp+ZrgckVreztQUm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWI3N2JjNGVkZDhhNGI4Mzc0NDc2YTczNDc3MTliNjc2
Yjc1NWUwHhcNMjUwNzMxMDkwMTEzWhcNMjUwODAxMDkwMTEzWjAzMTEwLwYDVQQD
EygxYWMxZDU4YTAwZTQ1MjZjM2I4ZmZmZWI3OWU0ODFjNTVlYzFkMWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IgklXh8NC1HSj6Jp6myf1rVZjsn
/EfE6UaBWqluUSZZ+jV+yFyltB9pVvWWzB8QtL3GGEmfGr0oBX8uInWavQacRipf
4UXrF98ns+0qjf9i3Jjdk05z6KXAfeB+STH+c8s5+0BCsqGo7pw84tuMaU6q7jWF
xj1KWFZPJ5toZLrBq04jadweD/Ng84kmz2vc7oPX/1h0n3mOfuqSuZ/dyTUGWOxy
faZ4ITac7efeLpSUGADBCXvNBAN8GKVADjEqLdv1xHlhR5BZyfxEHJgA1+cAKRCI
bLMgX5AG/UCVel7OxNHN77aBHvbH+0UXLFT37rnyFayzZWyKlHcgCW8GjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrB1YoA5FJsO4//63nkgcVewdHSMB8GA1UdIwQY
MBaAFGwbd7xO3YpLg3RHanNHcZtna3VeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zNjdkMzktOGJlNC00ZWNiLTliYjYt
ZmZkOTFiNDI1YTAwLzEvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zNjdkMzktOGJlNC00ZWNiLTliYjYtZmZkOTFiNDI1YTAw
LzEvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/QWR4hl
KZ7b/xluq0pNxtnrPBPSRMuQy9vhiK0NSp1ucq6Q7le1U9lGk15UXPDfH7/wGciC
AjkH/cmc78RFKkY4kRA6KkuOecC8W6+wxvPXtqZ3f45YJmnTJfobxe5aOyBKxw7f
loSTRHq9vxF4L9rZE0PMtWD/WXPI3vk2xO5urVyNENivdkbXgC92i63XbzJcAlQJ
sKTzxXWtALoIUd7xan+FfAByVWRVwL0WmJ4nhIPtJf8B4m5DBfTTG/+XsXCiADEA
sCFk37f5iDyc794ZXHJ6d1k50w6rLKsbhR1NeklLT35obHLRFKlgpmVxH6ARE+cL
Q3P79V0BIcQ0xQ==
-----END CERTIFICATE-----
Generated at Thu Jul 31 18:27:41 2025 by rpki-client